OneCRL Entry
e2905f3d-40fd-4d7d-8a59-2fa73d5de505
Revocation Entry
- Status
- disabled
- Serial
6F5E60E69C3A7469906619D56E4F499A- Last Modified
- 2026-06-11 22:56:44 UTC
- Schema
- 1780876807960
Issuer
- DN
- C=US, O=Internet Security Research Group, CN=ISRG Root X2
- DN SHA-256
8c229f9dbd7b8bb961f490c2864cf1274548fcb5e17ba538ad7609fe1177b691- Issuer DER
ME8xCzAJBgNVBAYTAlVTMSkwJwYDVQQKEyBJbnRlcm5ldCBTZWN1cml0eSBSZXNlYXJjaCBHcm91cDEVMBMGA1UEAxMMSVNSRyBSb290IFgy
Context
- Bugzilla
- 2046880
- Action
- 37 CA certificates were added to OneCRL from a CCADB-derived list; initiated by c**********l@bots.tld on 2026-06-11T17:02:37Z, reviewed by Ben Wilson, approved in staging by d**********r@mozilla.com at 2026-06-11T18:36:42Z, and approved in production at 2026-06-11T22:57:03Z.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
- Issuer CA
- ISRG Root X2
- CA Owner
- Internet Security Research Group
AI Summary
Generated 2026-06-30 10:49 UTC · Model: gpt-5.4-miniThis Bugzilla case added 37 CA certificates to Mozilla OneCRL. The action was initiated by the ccadb2onercl bot, which opened the bug and attached the proposed issuer/serial pairs on 2026-06-11T17:02:37Z. Ben Wilson reviewed the list, confirmed that 37 CA certificates needed to be added, and requested production approval later that day. David Keeler approved the changes in staging and then in production on 2026-06-11. The thread explicitly says the entries were based on revoked intermediate certificates reported in the CCADB, but it does not state the specific CCADB revocation fields or candidate-report state that qualified them. The thread also does not name an external compliance incident or CA closure; only the CCADB-reported revocations are stated. Timeline-wise, the OneCRL additions were approved in production on 2026-06-11 and were confirmed present in Firefox profiles by 2026-06-12.
37 CA certificates were added to OneCRL from a CCADB-derived list; initiated by c**********l@bots.tld on 2026-06-11T17:02:37Z, reviewed by Ben Wilson, approved in staging by d**********r@mozilla.com at 2026-06-11T18:36:42Z, and approved in production at 2026-06-11T22:57:03Z.
Explicitly stated trigger: revoked intermediate certificates reported in the CCADB; specific revocation fields or candidate-report state not stated.
Unknown / not stated; the thread only references CCADB-reported revoked intermediate certificates and does not identify a separate compliance incident or CA closure.
Explicit in OneCRL thread · 0.98
- 2026-06-11ccadb2onercl bot opened the bug and attached proposed OneCRL additions based on revoked intermediate certificates reported in CCADB.
- 2026-06-11Ben Wilson said 37 CA certificates needed to be added and were ready for review in Staging.
- 2026-06-11David Keeler marked the changes approved in stage.
- 2026-06-11Ben Wilson asked to proceed with production approval.
- 2026-06-11David Keeler approved the changes in production.
- 2026-06-12Ben Wilson said the certificates were in Firefox profiles and he would update them in CCADB.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1780876807960,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=2046880",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "ME8xCzAJBgNVBAYTAlVTMSkwJwYDVQQKEyBJbnRlcm5ldCBTZWN1cml0eSBSZXNlYXJjaCBHcm91cDEVMBMGA1UEAxMMSVNSRyBSb290IFgy",
"serialNumber": "b15g5pw6dGmQZhnVbk9Jmg==",
"id": "e2905f3d-40fd-4d7d-8a59-2fa73d5de505",
"last_modified": 1781218604576
}